Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          J0fuRO/V2Y7A37c1h2BdSZahAEFf1hMTWNZuCEdFUoc=
Subject key identifier:   15:42:55:57:A0:8A:B8:00:84:5E:DF:6D:D7:4F:16:88:A3:E0:EA:8A
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       1488AB8692D2A7704671BECD947EA8705C00EC25
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:16 +0000
ROA not before:           Fri 08 Dec 2023 00:42:16 +0000
ROA not after:            Fri 06 Dec 2024 00:47:16 +0000
asID:                     268296
IP address blocks:        2804:4efc:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:88:ab:86:92:d2:a7:70:46:71:be:cd:94:7e:a8:70:5c:00:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:16 2023 GMT
            Not After : Dec  6 00:47:16 2024 GMT
        Subject: CN=15425557A08AB800845EDF6DD74F1688A3E0EA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:88:8e:e2:55:37:b8:3c:c4:56:10:48:bd:
                    e6:f5:9e:9b:52:69:b7:09:f6:4b:39:f1:33:51:03:
                    19:4d:bb:3b:30:c8:ee:b6:ea:3b:3e:ef:c8:1d:36:
                    ee:f3:d0:85:2f:b4:7e:74:e5:67:58:03:3a:b1:26:
                    72:5f:b7:37:39:7e:18:6b:4f:60:36:73:fa:97:b4:
                    fb:44:3f:8a:45:3b:d0:9d:74:2a:17:71:c8:f8:97:
                    28:b4:c1:f4:7d:7a:e8:a4:61:43:35:1c:6b:36:0a:
                    63:5c:0f:74:6f:8a:41:35:58:0f:15:aa:45:9c:3a:
                    b7:b8:3b:32:84:5d:e9:3d:e1:b1:65:6a:ec:ae:9f:
                    9c:19:4a:bc:8d:d1:d8:c5:f8:60:19:28:f0:55:f6:
                    44:e9:22:65:06:de:d5:0a:4a:65:b7:b2:56:68:c1:
                    7d:d9:67:5b:0a:a5:6b:c2:b1:9c:7e:fd:fe:a8:5a:
                    15:42:fe:b8:29:6f:1a:c1:2c:65:9d:4a:9b:b3:f2:
                    8a:84:87:50:4c:30:e8:80:d1:35:99:7a:4a:e3:be:
                    ec:fe:94:78:ce:39:cf:f7:7b:b3:5e:fb:86:c4:ad:
                    a6:55:06:b6:89:b3:0b:4d:d9:78:23:7f:7a:5e:8f:
                    09:b3:53:5a:38:d7:92:f7:6c:70:30:24:e7:2a:0c:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:55:57:A0:8A:B8:00:84:5E:DF:6D:D7:4F:16:88:A3:E0:EA:8A
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:ab:e2:90:c0:d4:06:5d:f2:96:cb:bc:3b:7a:ea:cd:a1:
         8b:24:4b:66:c1:cc:a5:ca:83:b8:09:89:db:ac:9d:8c:fe:fd:
         d8:a7:b0:b2:3f:49:ff:ec:40:6c:e4:40:4b:17:5f:01:f7:52:
         c7:fd:5c:83:ba:6e:28:4d:05:84:bc:c0:99:9a:88:58:0e:a1:
         39:77:bc:f6:34:5c:40:18:15:54:3f:39:5a:3d:4d:ac:89:65:
         c7:b2:31:11:79:c1:37:90:61:9a:f4:d6:b1:17:fc:90:76:13:
         4e:58:5b:2e:06:09:bd:34:a9:47:fa:0b:60:6d:60:e0:dc:1c:
         76:7d:80:75:70:4a:cc:26:ef:00:84:49:d8:bf:88:fd:3b:c1:
         21:8b:39:9f:ab:0a:81:e6:61:97:15:1b:47:52:24:41:20:36:
         8d:68:fc:17:8e:b3:34:a7:52:d0:7a:0b:7a:b6:5f:60:5d:a5:
         20:f4:36:fd:17:62:92:60:67:95:89:73:34:5c:59:4f:7c:00:
         8d:21:76:7d:84:55:e4:b8:5d:09:b3:8e:42:33:30:f7:bf:7b:
         78:73:c8:0a:f4:69:99:0e:ee:cf:ea:bc:cd:80:c1:e3:9b:eb:
         bf:aa:5f:40:ce:31:09:c9:70:b9:df:bd:22:12:6d:f1:05:30:
         e4:6d:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org